Access violation vulnerability in EventPrime – Events Calendar, Bookings and Tickets 3.4.1

The EventPrime plugin for WordPress, which helps with managing events, bookings, and tickets, has a security issue that allows unauthorized individuals to access sensitive data. This is because the plugin does not have a proper safeguard in place when using the booking_export_all() function, in all versions up to and including 3.4.1. As a result, attackers who have logged in with a subscriber account or higher are able to view all event bookings, which may contain personally identifiable information.